heimdal split out krb5_tkt_creds_step_output()

heimdal split out krb5_tkt_creds_step_input

lib/krb5_wrap/krb5_samba.c sq smb_krb5_s4u2self => HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE_PRINCIPAL

heimdal split out +krb5_tkt_creds_step_start()

SQ! selftest: not HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE => --expected-failures=${srcdir}/selftest/knownfail.no-KRB5-S4U => krb5_tkt_creds_set_impersonate_principal

SQ! TODO krb5_tkt_creds_set_impersonate configure checks => krb5_tkt_creds_set_impersonate_principal

heimdal: krb5_tkt_creds_set_impersonate => krb5_tkt_creds_set_impersonate_principal

TODO source3/utils/net_ads.c net_ads_kerberos_pac_common

sq auth/kerberos/kinit_login.*

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_step TODO: kdc_flags.b.renew = 1

sq auth/kerberos/kinit_login.c

sq auth/kerberos/kinit_login.c

source3/libads/authdata.c kerberos_return_pac gensec_set_credentials(gensec_server_context, server_credentials) cli_credentials_set_gensec_features

lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_done TODO: verify out_creds.client != state->in_creds.client

SPLIT remove unused source3/librpc/crypto/gse.*

auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

lib/krb5_wrap/krb5_samba.c smb_krb5_init_creds_get don't map NT_STATUS_INVALID_ACCOUNT_NAME => NT_STATUS_LOGON_FAILURE

Revert "TODO: source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache fix TDB_NO_FSYNC=1 make -j test FAIL_IMMEDIATELY=1 SOCKET_WRAPPER_KEEP_PCAP=1 TESTS='samba3.blackbox.guest.*ad_member_idmap_rid'"

This reverts commit 2ef2f48e87ac08b229e76cdb362a32fe9ee7dbc3.

TODO: source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache fix TDB_NO_FSYNC=1 make -j test FAIL_IMMEDIATELY=1 SOCKET_WRAPPER_KEEP_PCAP=1 TESTS='samba3.blackbox.guest.*ad_member_idmap_rid'

With 17d125269f03 auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Should we change the test to use gensec:gssapi_krb5=no ?

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source4/auth/gensec/gensec_gssapi.c gss_init_sec_context only once!  gssapi_client_krb5_creds_recv => server_name

source4/auth/gensec/gensec_gssapi.c no gsskrb5_set_send_to_kdc

auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

source3/script/tests/test_smbd_no_krb5.sh gensec:gssapi_krb5

kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 61fe1594406cb875022e3fc490a53387a70539fa.

auth_generic_client_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 805558fd73bea413ee10a08f90222f5225b45042.

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_client gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit b8bd211b269708b12b9960f2a4db3acfe9784365.

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 0b62f9c1f2156c6424768e88feaa079d269ed4d4.

kerberos_return_pac backends[idx++] = gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

Revert "auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);"

This reverts commit 7e76edfbecfc2b254f0b367c9d046bfeb4fb1c86.

auth_generic_prepare gensec_security_by_oid(NULL, GENSEC_OID_KERBEROS5);

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c static int cli_credentials_get_keytab()

auth/credentials: remove unused cli_credentials_get_server_gss_creds()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

source3/librpc/crypto/gse.c gssapi_server_krb5_creds()

source4/auth/gensec/gensec_krb5.c cli_credentials_krb5_refresh_keytab smb_krb5_get_keytab_container

source4/auth/gensec/gensec_krb5.c gensec_krb5_update_internal server_in_keytab = NULL; always!

source4/auth/gensec/gensec_krb5.c TODO always server_in_keytab = NULL

source4/auth/gensec/gensec_gssapi.c gensec_gssapi_server_start gssapi_server_krb5_creds

source3/utils/ntlm_auth.c ntlm_auth_prepare_gensec_server gse_krb5_create_server_keytab

source3/libads/authdata.c kerberos_return_pac gensec_set_credentials(gensec_server_context, server_credentials)

source3/auth/auth_generic.c auth_generic_prepare gse_krb5_create_server_keytab()

source3/libsmb/cliconnect.c cli_session_creds_prepare_krb5 skip kinit => rm selftest/knownfail.d/auth_log_krb5

TODO source3/librpc/crypto/gse.c use cli_credentials_krb5_refresh_ccache_send/recv

source3/libsmb/cliconnect.c cli_session_creds_init => ads_krb5_network_create

Revert "source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec..."

This reverts commit a62052bc43c4a97645ccce562f13d0de910400c9.

source3/libads/sasl.c skip ads_kinit_password TODO: krb5_set_password no KRB5CCNAME and dnsupdate gensec...

Revert "auth/credentials: remove unused cli_credentials_set_machine_account_pending()"

This reverts commit 918fda0d4286e9e53e9abc705d59b072c336792e.

auth/credentials: remove unused cli_credentials_set_machine_account_pending()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly"

This reverts commit 57856dd598c0a8b3429842529f328b3889ffb218.

Revert "debug auth_system_session"

This reverts commit 9f25ef9e4820e2522badc6bdd5d468dcde4fb549.

Revert "DEBUG..."

This reverts commit 6a229f62228b1556c7421c9b7dde9542f2f4a40c.

Revert "more debug auth_system_session->credentials set_machine_account"

This reverts commit 65f93ea0a65fcda02297de2612c27eee161962c2.

more debug auth_system_session->credentials set_machine_account

DEBUG...

debug auth_system_session

source4/auth/system_session.c auth_system_session_info call cli_credentials_set_machine_account() directly

callers use the cached system_session() anyway and we want to remove
cli_credentials_set_machine_account_pending()

source3/lib/util_cmdline.c avoid cli_credentials_set_machine_account_pending()

We use cli_credentials_set_machine_account_db_ctx() later...

auth/credentials/credentials_krb5.c add cli_credentials_krb5_refresh_keytab()

auth/credentials/credentials_krb5.c cli_credentials_krb5_get_keytab_name without krb5_kt_get_full_name()

auth/credentials/credentials_krb5.c TODO cli_credentials_krb5_get_keytab_name()

Revert "auth/kerberos/kinit_login.c"

This reverts commit ced94191df0be15465bd57f03d3bba11556cd741.

auth/kerberos/kinit_login.c

auth/credentials/credentials_krb5.c cli_credentials_set_keytab_name fix updating

source3/librpc/crypto/gse_krb5.c split out gse_krb5_create_server_keytab()

cli_credentials_new_ccache "MEMORY:cli_credentials-%u-%p"

auth/kerberos/gssapi_helper.c add gssapi_server_krb5_creds()

auth/kerberos/gssapi_helper.c remove #if 0

sq lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user

lib/krb5_wrap/krb5_samba.c smb_krb5_s4u2self_send fallback to krb5_get_credentials_for_user

auth/kerberos/gssapi_helper.c revert gssapi_client_krb5_creds_s4u2p_start DBG_ERR

Revert "DEBUG..."

This reverts commit 7c5d052df42e4c40e7ff0e1ceda1006bf90f6cbf.

DEBUG...

selftest: not HAVE_KRB5_TKT_CREDS_SET_IMPERSONATE => --expected-failures=${srcdir}/selftest/knownfail.no-KRB5-S4U

revert torture_rpc_teardown hack

auth/credentials/credentials_krb5.c remove cli_credentials_set_impersonate_principal...

TODO source4/auth/kerberos/kerberos_util.c remove unused kinit_to_ccache() TODO check krb5_set_real_time cli_credentials_wrong_password

source4/auth/gensec/gensec_gssapi.c no cli_credentials_get_impersonate_principal() DELEG

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send remove legacy_s4u/legacy_kinit

source4/ntvfs/cifs/vfs_cifs.c cli_credentials_s4u_upn_creds

source4/torture/rpc/remote_pac.c all tests again

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds s4u2proxy

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_init no KRB5KDC_ERR_PATH_NOT_ACCEPTED!

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_s4u2s_done state->imp_k5creds.flags.b.initial = true

source4/torture/rpc/remote_pac.c test_S4U2Proxy cli_credentials_s4u_upn_creds

sq source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache cli_credentials_s4u_service_cred state->service_ccache_name

HACK source4/torture/rpc/remote_pac.c s4u2proxy

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds* state->service_ccache_name TODO

source4/auth/gensec/gensec_gssapi.c gensec_gssapi_update_got_ccache cli_credentials_s4u_service_cred state->service_ccache_name

auth/credentials/credentials_krb5.c cli_credentials_krb5_refresh_ccache_send use cli_credentials_s4u_service_cred

auth/credentials/credentials_krb5.c cli_credentials_s4u_service_cred

auth/kerberos/gssapi_helper.c gssapi_client_krb5_creds service_ccache_name

source4/heimdal/lib/krb5/get_cred.c krb5_tkt_creds_step KRB5_GC_CONSTRAINED_DELEGATION ctx->second_ticket

cli_credentials_krb5_refresh_ccache... s4u2self

Revert "HACK test_S4U2Self"

This reverts commit 0bed0fe3bc0001c87a50c416280d98ada7c4c48c.